Open Source Vulnerabilities

metallb

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

cjson, cjson, cjson

metallb

HashiCorp memberlist before version 0

opentelemetry-collector-contrib

gRPC-Go is the Go language implementation of gRPC

metallb

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

logstash-exporter

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

vault-k8s

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established

prometheus-operator

Prometheus is an open-source monitoring system and time series database

rabbitmq-cluster-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

prometheus-redis-exporter

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

rabbitmq-cluster-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

trust-manager

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

vault-k8s

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free

weaviate-1.35

weaviate-1.35

weaviate-1.34

weaviate-1.34

weaviate-1.33

weaviate-1.33

weaviate-1.32

weaviate-1.32

weaviate-1.31

weaviate-1.31

weaviate-1.30

weaviate-1.30

weaviate-1.29

weaviate-1.29

vllm, vllm-wheels

vllm

kernel

Important: kernel security, bug fix, and enhancement update

perl-DBI

Important: perl-DBI security update

osbuild-composer

Important: osbuild-composer security update

postgresql16-postgis

Important: postgresql16-postgis security update

image-builder

Important: image-builder security update

qt5-qtbase

Important: qt5-qtbase security update

traefik-2

traefik-2

terraform-fips-1.13

terraform-fips-1.13

terraform-fips-1.12

terraform-fips-1.12

nltk

nltk

nltk

gitpython

gitpython

gitpython

gitpython